Akademy Privacy Policy

Akademy (“we”, “our”, “us”) operates the Akademy mobile and web application that enables clinicians, students, and medical organizations to discover, publish, and manage accredited educational events. This Privacy Policy explains how we handle Personal Data within the app, on our websites, and through related services. It meets the disclosure expectations of Apple App Store Connect and Google Play.

1. Personal Data We Collect

Account and Profile Information

• Identifiers: name, professional title, specialty, organization, country, email, and phone number.
• Authentication data: hashed passwords, one-time passcodes, third-party identity tokens (e.g., Google).

Event and Transaction Data

• Event preferences, tickets, bookings, waitlists, certificates, and attendance records.
• Organizer submissions: event details, supporting documents, payout configurations.
• Payment metadata from our processors (no full card numbers stored on Akademy servers).

Device and Usage Data

• Device identifiers, OS version, app version, browser type, IP address, and language settings.
• App interactions, crash diagnostics, and log files to secure and optimize performance.

Optional Data

• Push notification preferences, saved searches, survey responses, and support requests.

2. How We Use Personal Data

• Provide core functionality: registration, authentication, event discovery, booking, and certificate delivery.
• Facilitate organizer workflows: event publishing, attendee management, compliance checks, and payouts.
• Process payments through vetted PCI-DSS compliant processors.
• Send transactional communications (confirmations, reminders, schedule updates, regulatory notices).
• Improve and personalize the experience, including recommendation models for relevant medical events.
• Maintain safety, prevent fraud, enforce policies, and comply with legal obligations (e.g., CPD tracking).

3. Sharing and Disclosure

• Event Organizers: When you register or attend an event, organizers receive necessary attendee details.
• Service Providers: Cloud hosting, messaging, analytics, identity verification, and payment vendors under contract.
• Professional Bodies: When required to issue or verify educational credits or attendance certificates.
• Legal and Safety: Authorities or third parties, if we reasonably believe disclosure is required by law or to protect users.
• Business Transfers: In connection with mergers, financing, or acquisition events with appropriate safeguards.

We do not sell Personal Data to third parties or share it for targeted advertising unrelated to medical education.

4. International Data Transfers

Akademy operates globally with infrastructure hosted in reputable cloud regions. When data moves across borders, we rely on contractual safeguards (such as Standard Contractual Clauses) and limit access to personnel with a legitimate need.

5. Retention

We retain Personal Data only as long as needed for the purpose collected, to meet legal or accreditation obligations, resolve disputes, and enforce agreements. Users may request deletion once mandatory retention periods expire.

6. Your Rights & Choices

• Access, update, or delete your profile data within the app or by contacting us.
• Withdraw consent for non-essential communications and push notifications in settings.
• Request export of your data (subject to authentication and technical feasibility).
• Appeal automated decisions related to account status, if applicable.

Residents of certain jurisdictions (e.g., GDPR, HIPAA-adjacent programs) may have additional statutory rights which we honor where required.

7. Security

We implement technical and organizational safeguards including encryption in transit, network segmentation, continuous monitoring, role-based access, and secure coding practices. No method is 100% secure, so we urge users to keep credentials confidential and promptly report suspected issues.

8. Children’s Privacy

Akademy is designed for licensed professionals, trainees, and accredited organizers in the medical domain. We do not knowingly collect data from children under 16. If you believe a minor has used the service, contact us and we will take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy to reflect product, legal, or regulatory changes. Significant updates will be announced in-app or via email before they take effect. The “Last updated” date indicates the current version.

10. Contact Us

For privacy requests or questions, email privacy@akademy.app or write to Akademy Privacy Office, 123 Medical Plaza, Dubai, UAE. You may also reach us through the in-app help center.